Senior Cloud Security Software Engineer

HashiCorp; Tri City (OR); On-site; USD 140,000 - 200,000; Full time

Job summary

HashiCorp, an IBM Company, is seeking a Security Engineer to lead cloud security architecture across major clouds and build automation tools using Go and Python. You will partner with platform, infra, product, and security teams to shift security left in the engineering lifecycle.

You will design guardrails with Terraform, implement IAM and Kubernetes security patterns, and mentor engineers while translating risks into reusable patterns.

Qualifications

Responsibilities

• Lead design and implementation of cloud security architecture across AWS, Azure, GCP, and other cloud environments.
• Architect and build production-quality security tooling and automation using Go/Golang and Python, integrating security into infrastructure and engineering workflows.
• Design preventative security controls and automated guardrails using Terraform and Infrastructure as Code (IaC).
• Establish scalable security patterns across IAM, cloud networking, workload identity, containers/Kubernetes, secrets management, PKI, and workload protection.
• Design and integrate security controls into CI/CD pipelines, infrastructure provisioning, and developer workflows, shifting security earlier into the engineering lifecycle.
• Provide technical leadership for complex cloud security initiatives, independently driving solutions from architecture and design through implementation.
• Identify systemic cloud security risks and translate them into reusable engineering patterns, automation, detections, and preventative controls.
• Partner with platform, infrastructure, product, and security engineering teams to conduct architecture reviews and influence the design of secure cloud services.
• Improve CSPM/CNAPP, vulnerability management, detection, and cloud security monitoring capabilities and translate findings into engineering improvements.
• Research emerging cloud attack techniques and technologies and apply those insights to evolving cloud security architecture.
• Mentor engineers and provide technical direction on cloud security engineering, automation, and secure infrastructure design.

Skills

Cloud security

Go/Golang

Python

Security architecture

Terraform

Infrastructure as Code

CI/CD security

Leadership

Threat modeling

Tools

Terraform

Kubernetes

AWS

Azure

GCP

Job description

Your Role and Responsibilities

At HashiCorp, an IBM Company, we’re on a mission to enable organizations to provision, secure, connect, and run infrastructure for any application. Our Security Engineering team helps protect the cloud environments and services that support that mission.

• Lead the design and implementation of cloud security architecture and engineering solutions across AWS, Azure, GCP, and other cloud environments.
• Architect and build production-quality security tooling and automation using Go/Golang and Python, integrating security directly into infrastructure and engineering workflows.
• Design preventative security controls and automated guardrails using Terraform and Infrastructure as Code (IaC), enabling secure-by-default cloud deployments.
• Establish scalable security patterns across IAM, cloud networking, workload identity, containers/Kubernetes, secrets management, PKI, and workload protection.
• Design and integrate security controls into CI/CD pipelines, infrastructure provisioning, and developer workflows, shifting security earlier into the engineering lifecycle.
• Provide technical leadership for complex cloud security initiatives, independently driving solutions from architecture and design through implementation and operationalization.
• Identify systemic cloud security risks and translate them into reusable engineering patterns, automation, detections, and preventative controls rather than relying solely on manual remediation.
• Partner with platform, infrastructure, product, and security engineering teams to conduct architecture reviews and influence the design of secure cloud services.
• Improve CSPM/CNAPP, vulnerability management, detection, and cloud security monitoring capabilities and translate findings into engineering improvements.
• Research emerging cloud attack techniques and technologies and apply those insights to evolving cloud security architecture.
• Mentor engineers and provide technical direction on cloud security engineering, automation, and secure infrastructure design.